Unscored severity · published Apr 22, 2011
CVE-2011-1422
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rsa Adaptive Authentication On-premise · Emc
2.0; 5.7.0; 5.7.2; 5.7.3; 6.0; 6.0.2.1 · source: NVD
Affected product
RA
Rsa Adaptive Authentication On-premise
Emc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1422
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1422
Vendor Advisory
http://secunia.com/advisories/44236
securityreason.com
http://securityreason.com/securityalert/8215
securitytracker.com
http://securitytracker.com/id?1025382
www.securityfocus.com
http://www.securityfocus.com/archive/1/517534/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/47408
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1026
More from Rsa Adaptive Authentication On-premise
5.4
CVE-2016-0925
Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before…
–
CVE-2014-4631
RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authentication Integration Adapters…
–
CVE-2014-0638
Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML…
–
CVE-2014-0637
Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote…
–
CVE-2012-4611
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allow remote attackers to inject arbitrary web script or HTML…